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Abstract. PARITY is the problem of determining the parity of a string / of n bits given 
access to an oracle that responds to a query x E {0,1, . . . ,n — 1} with the x th bit of the 
string, f(x). Classically, n queries are required to succeed with probability greater than 
1/2 (assuming equal prior probabilities for all length n bitstrings), but only \n/2] quantum 
queries suffice to determine the parity with probability 1. We consider a generalization to 
strings / of n elements of Z& and the problem of determining Ylf( x )- By constructing 
an explicit algorithm, we show that n — r (n > r E N) entangled quantum queries suffice 



to compute the sum correctly with worst case probability mm{[n/r\/k, 1}. This quantum 
algorithm utilizes the n — r queries sequentially and adaptively, like Grover's algorithm, 
qh| but in a different way that is not amplitude amplification. 

1. Introduction 
> 

o , 

PARITY is the oracle (or black-box) problem of determining the parity of an n-bit string by 
querying positions in the string. Since even a single unqueried bit can change the parity, 
n classical queries are required to solve this problem with probability 1, assuming all n-bit 
q ■ strings are possible. 

When n = 2, this is Deutsch's problem [1], for which a single quantum query, used properly, 
suffices [2]. Beals et al. show that in general [n/2] quantum queries suffice by applying 
^ the solution to Deutsch's problem to the bits in pairs [3] . In their algorithm the quantum 

queries are independent of one another — they can be asked in parallel since none depends 
on the responses of the oracle to the others — and they are also incoherent — after each 
query is processed, the state is measured and the resulting information (the parity of a 
pair of the bits) is combined classically at the end of the algorithm. 

This same independence of multiple queries is a feature of existing multi-query quantum 
algorithms for abelian [4] and non-abelian {e.g., [5,6,7]) hidden subgroup problems, which 
range from incoherent [4] through partially [5,6] to completely [7] coherent. Grover's 
quantum search algorithm [8], and quantum (random walk) search algorithms on graphs 
[9,10] more generally, however, utilize coherent sequences of adapted queries — the quantum 
state is modified by each oracle response before it is returned to the oracle for the next 
query, so the queries are not independent. These algorithms all use amplitude amplification 
[11] to adapt their sequential queries. 
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But amplitude amplification, which identifies an element in the preimage of 1 for some 
bit-valued function, does not apply to PARITY, nor to its generalization: 

Sum. Let / : Z n — > Z&, where / is accessed via an oracle that responds with 
fix) when queried about x G Z n . Find J2 x ei, ^(• r ) (modulo k). 

As they are for PARITY, n — 1 classical queries are useless for SUM when / is chosen 
uniformly at random, i.e., the 1/k prior probability of each possible sum is unchanged 
after the oracle responds to the queries [12]. Our Uselessness Theorem: if 2q classical 
queries are useless, then q quantum queries are useless [12], implies that [in — l)/2j 
quantum queries are therefore useless for SUM. This raises the question of how well we 
can do using more than a useless number of queries; to answer it we construct an n — r 
quantum query algorithm that computes the sum correctly with worst case probability 
min{ \n/r\ jk, 1}, for each 1 < r 6 N, and that returns a result that is within \_kr/2n\ of 
the sum with probability at least 4/7T 2 . This quantum algorithm utilizes the n — r queries 
sequentially and adaptively, like quantum search algorithms, but in a different way that is 
not amplitude amplification. 

We motivate the development of our algorithm in the next section by considering the 
simplest new instances of SUM, computing the sum of 2 or 3 trits. In §3 we state and 
prove two basic lemmas and combine them to construct the general algorithm in §4. We 
conclude in §5 by recalling the result of van Dam that strings of n bits can be identified 
with high probability using n/2 + Oi^/n) queries, and hence any function of them can be 
computed with at least the same probability [13]. We generalize this result to k > 2 and 
show that, unsurprisingly — since it is designed to do more than just compute the sum of 
the string values, it gives success probabilities less than those of our algorithm. 



2. Sums of trits 

The simplest generalization of Deutsch's problem is to add two trits rather than two bits, 
i.e., the n = 2 and k = 3 version of SUM. As with Deutsch's problem, if all possible 
functions / : Z 2 — > Z 3 are equally likely, a single classical query is useless — the prior 
probabilities of 1/3 for each value of Ylf( x ) are unchanged after a single query — while 
two classical queries suffice to determine the sum with probability 1. Thus the goal of a 
quantum algorithm for this problem should be to determine the sum with a single quantum 
query with probability greater than 1/3. 

PROPOSITION 1. Using a single quantum query the sum of two trits can be determined 
with worst case probability 2/3. 

Before giving the proof we recall some standard notation: We will work in the Hilbert 
space C n <S> C , with computational basis {|x)|y) | x E 1> n ,y 6^}. The shift operator 
acts by X : \z) i— > \z + 1) and the oracle acts by Of : \x)\y) i— > \x)\y + fix)) = \x)X^ x ^\y). 



Finally, u = e 2? ™/ fc , and the Fourier transform on C acts by 



fc-i 



vfc e=0 

since X|u; _y ) = u~ y \u~ y ). These "Fourier" (or "character") basis states will be used to 
implement the widely useful generalization to dimensions greater than 2 [14,15,16] of the 
"phase kickback trick" [2]. 

To use these states in a quantum algorithm for the two trit problem we might expect 
simply to query the oracle with a state of the form 

-L(|o) + |i»®|0>, 

where <p = u~ y for some y G {1, 2} C Z3, as if we were solving Deutsch's problem. Notice, 
however, that the relative phase of the two components in the state returned by the oracle 
would be c^ ) - -^ 1 ), so it would not encode the sum /(0) + /(l), unlike the two bit case 
in which — /(l) = /(l) (mod 2). A different query state is required: 

Proof (of Proposition 1). It suffices to exhibit a single query algorithm that succeeds with 
probability 2/3. 

0. Initialize to the state 

-^fllJIwVlO)!*/- 1 ))- (2) 

1. Call the oracle Of to obtain the state 

^( U ^\l)\ U l )+ U -m\0)\ U - 1 )). 

Notice that the relative phase of the two terms is ujfw+fy 1 ). We could argue at 
this point that there is a POVM that identifies which of the three possible states we 
have with probability 2/3 [17], but as a simple sequence of unitary transformations 
avoids the necessity for anything beyond a complete von Neumann measurement in 
the computational basis, we describe it explicitly in the following steps. 

2. Act by X <g> I to obtain the state 



^=(uf^\0)\^)+u-f^\l)\^)). 



3. Act by K to obtain the state 



^|0>(^V>+u,-^V>), (3) 



where K acts on C n <g> C fc by 

(|0) \u)°) if x — n — 1 and y = k — 1; 

jn-l)!^- 1 ) if x = 0andy = 0; 
\x)\uj v ) otherwise. 

Note that while K is a complicated unitary operation, it is independent of /, i.e., it 
does not call the oracle. 

The C tensor factor in the final state (3) can be rewritten as: 
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/(i)|,.,i\ J-,.,-/(0)|,.,° 



,ur v '\u 



)+ w -/<°)| w °» 



= w -^°)4=(w E/ |o; 1 > + |a; )) (4) 

= a;-^)i=((l + ^)|0) + (l + ^- 1 )|l) + (l + a;^- 2 )|2)), 

using the definition (1), so now measurement of the C tensor factor will return Ylf( x ) 
with probability 2/3. | 

To obtain this probability our initial query (2) was an entangled state, rather than the 
usual tensor product state; this is the first innovation in the algorithm up to which we are 
building. The next step is to consider adding n = 3 trits. In this case two classical queries 
are useless, so one quantum query is useless [12], and we must consider algorithms with 
two coherent quantum queries. 

PROPOSITION 2. Two quantum queries suffice to solve SUM with probability 1 when 
n = k = 3. 

Proof. It suffices to exhibit a two query algorithm that succeeds with probability 1. 

0. Initialize to the entangled state 

i=(|l)|a; 1 } + |0)|a;- 1 ) + |0)|^- 2 )). 

1. Call the oracle Of to obtain the state 

^(^W|l)|a; 1 }+a;-^ )|0)|a;- 1 )+a;- 2 ^ )|0)|a;- 2 )). 
v3 

2. Act by X eg) i" to obtain the state 

^(^W|2)|a; 1 )+a;-^ )|l)|a;- 1 )+a;- 2 ^ )|l)|a;- 2 )). 
v3 



3. Act by J\ to obtain the state 



i=(a;/W|2)|^)+a;-^)|2)|^ 1 )+a;- 2 ^)|l)|^- 1 )), (5) 

where J r acts on C n Cg> C by 

(\x)\u°) ify = 0; 

J r : |x)|a; y ) = <^ (x + r)^ 1 } if j/ = -1; 
[ |x)|a; y+1 ) otherwise. 

Note that like -KT, while J r is a complicated unitary operation, it is independent of 
/, i.e., it does not call the oracle. 

4. Call the oracle Of a second time to obtain the state 

1 ( a ;/(l)+2/(2)| 2) | w 2 )+w -/(0)+/(2)| 2) | a; l )+w -2/(0)-/(l)| 1) | w -l ) )_ 

v3 

5. Act by X ® i" again to obtain the state 

1 ( a ,/(l)+2/(2)| 0) | w 2 )+w -/(0)+/(2)| 0) | w l )+a; -2/(0)-/(l)| 2) | a; -l ) )_ 

v3 

6. Act by K to obtain the state 

^|0)(a;^ 1 )+ 2 ^ 2 )|a; 2 )+a;-^ )+^ 2 )|a; 1 )+a;- 2 ^ )-^ 1 )|a; )). (6) 

V3 

The C tensor factor in the final state (6) can be rewritten as: 

J = ( w /(l)+2/(2)| w 2 )+w -/(0)+/(2)| w l )+w -2/(0)-/(l)| w ) ) 

v3 

= 1 /(0)+2/(l) ( w -^/| a; 2 ) + y^E/j^lj + y-SE/j^) (7) 

v3 



CJ 



/(0)+2/(l)| E j\ 



using the definition (1), so now measurement of this tensor factor will return J^ f(x) with 
probability 1. | 

The key piece of algebra is that the phases of the terms in (6), each a linear combination of 
two values of /, are also linear combinations of all three values of /, with a coefficient of in 
front of the third value: (0,l,2)-f, (-l,0,l)-f = (2, 0, 1) -f, and (-2, -1, 0) -f = (l,2,0)-f, 
where f = (/(0), /(l), /(2)). Written this way it is clear that the coefficient vectors are 



successive cyclic shifts a of (0, 1, 2), so if we factor out the last phase factor the other two 
become: 

(0,l,2)-f-a 2 (0,l,2)-f=(2,2,2)-f = -J]/ 

a(0, 1, 2) • f - a 2 (0, 1, 2) • f = (7(1, 1, 1) • f = -2 J2 /. 

the phases of the first two terms in (7). 

This algorithm is optimal since it uses only one more than the useless number of quantum 
queries. Notice that its two coherent quantum queries are sequential rather than parallel, 
and that the second query is adapted in the sense that the state (5) that is passed to 
the oracle as the second query depends on the response of the oracle to the first query, 
unitarily transformed by J(X <S> I). This adaptation differs from amplitude amplification 
[11] and is the second innovation in our quantum summation algorithm. 

3. Two basic lemmas 

To generalize the quantum algorithms given in the previous section for summing trits, it 
is convenient first to state two basic lemmas. 

Lemma 3. For A e Z k and k> s e N, let 

Measurement of \A S ) in the computational basis returns \y), y G Z/-, with probability 

1/ \a \l 2 1 f sin7rs(y-A)/k \ 2 



|2 



defined to be a continuous function ofy — A. The probability \(y\A s )\ takes its maximum 
value, s/k, at y = A, and the probability that the measurement is within ±\_k/2s\ of A is 
at least 4/ it 2 . 

Proof. This is an elementary (and familiar from phase estimation; see, e.g., [2]) calculation 
using the definition (1): 



sk jr[ Vsk f~[ Vsk 1-ojV A 

Taking the norm squared of this expression gives (9) , which by continuity takes the value 
s/k when y = A. That this is the maximum follows from the fact that in this case all the 
terms in the sum above are 1. 
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Writing d = y — A, \d\ < k/2s implies \sm7isd/k\ > \7rsd/k\/(w/2) = 2s\d\/k, since the 
argument of sin has absolute value no more than n/2. Also, | sin7r<i//c| < \nd/k\. Using 
these bounds in (9) gives 



\{A + d\A s )\ > sk {, d/M ) ~ 1x2k 



so 



E4 s 
n 2 k ~ 

\d\<k/2s 



k~\ 4 s 4 

7T 2 k ~ n 2 



When k = 3 = s and A = J2f(x) : the state (8) is equal to the C tensor factor in 
the final state of the algorithm in Proposition 2, up to an overall phase. Similarly, in 
the algorithm of Proposition 1, if rather than factoring out the phase a; - -^ -* in (4), we 
factor out o;^(°)+ 2 ^( 1 ) 7 we obtain (8) with k — 3, s — 2, and A = ^2f(x). The success 
probabilities of 1 and 2/3 in these two algorithms are the values s/k given by Lemma 3. 

When A = XLez f( x )i each component of the state (8) depends on all of the n values 
of /. The next lemma says that, up to an overall phase, this state is equivalent to one in 
which each component depends on fewer than n values of /. 

LEMMA 4. Let 1 < r E N, let r\n, and let s = n/r. Then 



£^ =1 m[/((m-l)r)+-..+/(mr-l)]J_y^ w -^£/, 8-i\ 

v i=\ 



if w S; =1 ( m -<)[/((m-l)r)f.4/(mr-l)]i S -A 
v 1=1 



For each value of £, namely for each component, in the sum on the right hand side of this 
equation, there is a term in the sum in the exponent which vanishes because m = L Since 
each of these terms depends on r values of /, each component depends on sr — r = n — r 
values of /. In the algorithm of Proposition 1, n = 2 and r = 1 so s = n/r = 2, and each 
component of the final state (3) depends onn — r = 2 — 1 = 1 value of /. In the algorithm 
of Proposition 2, n = 3 and r = 1 so s = n/r = 3, and each component of the final state 
(6) depends onn — r = 3 — 1 = 2 values of /. 

4. The general SUM problem 

Summing two and three trits are special cases of the general SUM problem that motivate 
the two innovations in our general algorithm. Propositions 1 and 2 are special cases of the 
following theorem. 

THEOREM 5. Let f : Z n — >■ Z&. Using n — r quantum queries the sum J2 xeZ f(x) can 
be computed correctly with worst case probability min{|_n/rj//c, 1}, for each n > r G N. 



Furthermore, the same algorithm outputs a result within \_kr/2n\ of the correct sum with 
probability at least 4/-7T 2 . 

Proof. First consider the case r\n and let s = n/r GN. If s < k and we can construct the 
state 






then by Lemma 3 we can find ^2 f{ x ) with probability s/k = n/(rk), and even when the 
output is wrong, it is likely to be close — within \rk/2n\ with probability at least 4/7T 2 . By 
Lemma 4 we need only construct the state 

— V u ^ S m=l(™-£)lf((™-±)r) + -+f(mr-l)] l^-lx 

v t=\ 

in which each component depends on n — r values of /. The following algorithm does so, 
using n — r quantum queries: 

0. Initialize to the entangled state 

^(|r)|a; 1 ) + |0)|a;- 1 ) + --- + |0)^-( s - 1 ))). 

1. Apply K(((X <g> I)O f ) r ) (J r ((X <g> I)Of) r ) s ~ 2 to obtain the state 



— 10) Vw E -=i (m -^ )[/((m - 1)r)+ - +/(mr - 1)] |o; s " £ )- 



2. Measure the C tensor factor in the computational basis. 

Notice that when n = k and r = 1, i.e., using k — 1 quantum queries, this algorithm returns 
J2 f(x) with probability 1. 

If s > k, or equivalently, if r < n/k, then n = uk + v with u > r and < v < k, so we 
can use k — 1 queries in this algorithm applied to each block of length k, using a total of 
uk — u = n — v — u queries, leaving v + u — r > v queries to identify the last v values of /. 
Thus when s > k, we can find J^ f(x) with probability 1. 

Second, and similarly, if r)(n, let s = \n/r\ . Then n = rs + w with < w < r. Using the 
algorithm applied to the first n — w values of /, we can compute 

rs — 1 



y f(x), with probability minjl, [n/r\/k}, 



x=0 

using n — w — r queries, leaving w queries to identify the last w values of /. 



Thus in all cases, this algorithm uses n — r quantum queries to return ^2 f( x ) with prob- 
ability minjl, \n/r\/k}, and a value within \_kr/2n\ of the sum with probability at least 

4/tt 2 . | 

We believe this algorithm is optimal, but we have only proved it to be so for r — n — 1, 
i.e., a single query [18]. 



5. Conclusion 

Since the number of queries n — r > 0, the success probability of our algorithm is always 
at least 1/k, as it should be. Furthermore, since \n/r\ = 1 until r < n/2, fewer than n/2 
quantum queries in this algorithm are useless, as they must be according to the Uselessness 
Theorem [12]. When k = 2, Theorem 5 says that for r < n/2 the success probability is 1, 
as we know from the solution to PARITY [3]. 

For k > 2 we know of no algorithms to which to compare ours. Van Dam's quantum 
algorithm for obtaining all the information about a function Z n — > Z2 with high probability 
using n/2 + 0(y/n) queries [13], however, can be generalized to functions / : Z n — ¥ Z^: 

THEOREM 6. Let f : Z n — > Z^. There is a quantum algorithm using q queries that 
correctly identifies the function with worst case probability 



Pq 



hi^-v- do) 



j=o 



The cumulative distribution function (10) for this binomial probability distribution is 
greater than 0.95 (almost 0.98) provided q > n(k — l)/k + 2^Jn(k — l)/k, namely the 
mean plus two standard deviations. Thus with this many queries we can determine the 
oracle correctly with probability more than 0.95, and thus compute the sum of its values 
correctly. More precisely, using this algorithm with q queries, we can compute J^ f(x) with 
probability less than p q + (1 — p q )/k (obtained by bounding the probability of computing 
the sum correctly by 1/k when the algorithm fails to output the correct /). Figure 1 plots 
this upper bound on the success probability as a function of the number of queries, along 
with the success probability of the algorithm of Theorem 5. 

The success probability of the algorithm of Theorem 5 is greater than or equal to that of the 
generalized van Dam algorithm of Theorem 6, for any number of queries, an unsurprising 
result since the latter is using those queries to try to determine the whole function, not 
just its sum. To succeed with probability greater than a constant, the former requires a 
fraction of n approaching 1 like 1/k quantum queries, while the latter requires this many 
plus 0(y/n). 
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1/fc 
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L^J Hi - f)l 



Fig. 1. Success probabilities of the algorithms from Theorems 5 (steps) and 6 (smooth). 

Finally, to succeed only approximately {i.e., within ek) with probability greater than a 
constant (4/7r 2 ; the sum of probabilities calculated for the central peak of (9) in Lemma 3), 
the algorithm of Theorem 5 requires n(l — e) quantum queries, independent of k. 

Acknowledgement 

This work has been partially supported by the Defense Advanced Research Projects 
Agency as part of the Quantum Entanglement Science and Technology program under 
grant N66001-09-1-2025. 

References 

[1] D. Deutsch, "Quantum theory, the Church- Turing principle and the universal quan- 
tum computer", Proc. Roy. Soc. Lond. A 400 (1985) 97-117. 

[2] R. Cleve, A. Ekert, C. Macchiavello and M. Mosca, "Quantum algorithms revisited", 
Proc. Roy. Soc. Lond. A 454 (1998) 339-354. 

[3] R. Beals, H. Buhrman, R. Cleve, M. Mosca and R. de Wolf, "Quantum lower bounds 
by polynomials", J. ACM 48 (2001) 778-797. 

[4] D. R. Simon, "On the power of quantum computation", in S. Goldwasser, ed., Pro- 
ceedings of the 35th Annual Symposium on Foundations of Computer Science, Santa 
Fe, NM, 20-22 November 1994 (Los Alamitos, CA: IEEE 1994) 116-123; SIAM J. 
Comput. 26 (1997) 1474-1483. 

[5] G. Kuperberg, "A subexponential-time quantum algorithm for the dihedral hidden 
subgroup problem", quant -ph/03021 12; SIAM J. Comput. 35 (2005) 170-188. 

[6] G. Alagic, C. Moore and A. Russell, "Quantum algorithms for Simon's problem over 
general groups", quant-ph/0603251; in Proceedings of the 18th Annual ACM-SIAM 
Symposium on Discrete Algorithms, New Orleans, LA, 7-9 January 2007 (New York 
& Philadelphia: ACM & SIAM 2007) 1217-1224. 

[7] D. Bacon, A. M. Childs and W. van Dam, "From optimal measurement to effi- 
cient quantum algorithms for the hidden subgroup problem over semidirect product 
groups", quant -ph/0504083; in Proceedings of the 46th Annual Symposium on Foun- 
dations of Computer Science, Pittsburgh, PA, 22-25 October 2005 (Los Alamitos, CA: 
IEEE 2005) 469-478. 

10 



[8] L. K. Grover, "A fast quantum mechanical algorithm for database search", in Pro- 
ceedings of the Twenty-Eighth Annual Symposium on the Theory of Computing, 
Philadelphia, PA, 22-24 May 1996 (New York: ACM 1996) 212-219; 
L. K. Grover, "Quantum mechanics helps in searching for a needle in a haystack", 
quant -ph/9706033; Phys. Rev. Lett. 79 (1997) 325-328. 
[9] N. Shenvi, J. Kempe and K. B. Whaley, "Quantum random walk search algorithm", 
quant -ph/02 10064; Phys. Rev. A 67 (2003) 052307/1-11. 

[10] S. Aaronson and A. Ambainis, "Quantum search of spatial regions", quant-ph/ 
0303041; in Proceedings of the 44th Annual Symposium on Foundations of Com- 
puter Science, Cambridge, MA, 11-14 October 2003 (Los Alamitos, CA: IEEE 2003) 
200-209; Theory of Computing 1 (2005) 47-79. 

[11] G. Brassard, P. H0yer, M. Mosca and A. Tapp, "Quantum amplitude amplification 
and estimation", quant -ph/0005055; in S. J. Lomonaco, Jr. and H. E. Brandt, eds., 
Quantum Computation and Information, Contemporary Mathematics 305 (Provi- 
dence, RI: AMS 2002) 53-74. 

[12] D. A. Meyer and J. Pommersheim, "On the uselessness of quantum queries", arXiv: 
1004.1434 [quant-ph]; to appear in Theor. Comput. Science. 

[13] W. van Dam, "Quantum oracle interrogation: getting all information for almost half 
the price" , quant-ph/9805006; in Proceedings of the 39th Annual Symposium on 
Foundations of Computer Science, Palo Alto, CA, 8-11 November 1998 (Los Alamitos, 
CA: IEEE 1998) 362-367. 

[14] M. Hunziker and D. A. Meyer, "Quantum algorithms for highly structured search 
problems" , Quantum Inform. Processing 1 (2002) 145-154. 

[15] W. van Dam and G. Seroussi, "Efficient quantum algorithms for estimating Gauss 
sums", quant -ph/0207131. 

[16] A. Shakeel, "An improved query for the hidden subgroup problem" , arXiv : 1101 . 1053 
[quant-ph] . 

[17] H. P. Yuen, R. S. Kennedy and M. Lax, "Optimum testing of multiple hypotheses in 
quantum detection theory", IEEE Trans. Inform. Theory IT-21 (1975) 125-134. 

[18] D. A. Meyer and J. Pommersheim, in preparation. 



11 



